Career Roadmap
Azure Administrator: Zero to Hero
This roadmap guides you from IT foundations to professional Azure administration. You will manage identities, design networking, deploy compute resources, implement storage solutions, and monitor Azure environments. AZ-104 validates Azure administrator expertise. The roadmap reflects the April 17, 2026 exam update. Use ExamOS practice quizzes to track progress at every stage.
Who is this roadmap for?
This roadmap is designed for IT Support Technicians and Systems Administrators transitioning to cloud administration, as well as Network Administrators adding Azure networking depth. Additionally, it is tailored for Help Desk Professionals moving into infrastructure roles, as well as DevOps Engineers who want to strengthen their Azure operational foundation.
Skills You'll Develop
Manage Microsoft Entra ID, RBAC, Azure Policy, and governance at scale.
Design and troubleshoot VNets, NSGs, UDRs, VPN Gateway, and Private Endpoints.
Deploy and manage VMs, Scale Sets, App Services, AKS, and ARM/Bicep templates.
Implement blob storage, Azure Files, managed disks, and lifecycle management policies.
Configure Azure Monitor, Log Analytics, Azure Backup, and Site Recovery.
Automate deployments with ARM templates and Bicep modules.
Target Roles in this Roadmap
- Azure Administrator: Manages Azure identities, networking, compute, storage, and monitoring
- Cloud Administrator: Administers cloud infrastructure across hybrid and multi-cloud environments
- Systems Administrator (Azure): Manages Windows and Linux workloads on Azure
- Infrastructure Engineer: Designs and implements Azure infrastructure solutions
- DevOps Engineer (Entry): Builds CI/CD pipelines and automates infrastructure deployment
Typical Employer Categories
- Technology & Software Firms: SaaS platforms, enterprise software vendors, Microsoft partners
- Financial Services: Banking, fintech, insurance, and payment processors on Azure
- Healthcare Organizations: Patient data platforms, HIPAA-compliant workloads on Azure
- Government & Public Sector: Federal agencies, state government, public sector Azure migrations
- Consulting & Professional Services: Azure assessments, managed services, and cloud transformations
- Microsoft Partners: Azure MSPs, Expert MSPs, and system integrators
The Certification Path
Recommended Path
| Cert | When | Why |
|---|---|---|
| Microsoft AZ-104 (Azure Administrator Associate) | Month 2-6 | The core Azure administration credential. Validates identity, networking, compute, storage, and monitoring expertise. |
Optional Foundation
| Cert | When | Why |
|---|---|---|
| Microsoft AZ-900 (Azure Fundamentals) | Month 1 | Optional warm-up. Only needed if you are completely new to Azure and cloud concepts. |
Specialization Path
| Cert | When | Why |
|---|---|---|
| Microsoft AZ-305 (Solutions Architect Expert) | Month 8-12 | Architecture depth. Natural follow-on for administrators moving into design roles. |
| Microsoft AZ-400 (DevOps Engineer Expert) | Month 8-12 | DevOps depth. For administrators moving into pipeline and platform engineering. |
| Microsoft SC-500 (Cloud and AI Security Engineer) | Month 8-12 | Security depth. For administrators moving into security-focused roles. |
Milestones: Junior → Mid → Senior
| Level | Milestone | When |
|---|---|---|
| Entry Level | IT foundations + basic Azure understanding | Month 2-3 |
| Practitioner Level | AZ-104 + production Azure administration proficiency | Month 6-8 |
| Specialist Level | AZ-104 + AZ-305/AZ-400/SC-500 + enterprise administration skills | Month 12+ |
Step 1 - IT and Azure foundations
Build the core IT and Azure foundations that AZ-104 assumes. This step establishes the vocabulary and operational context for everything that follows.
~1-2 months~1-2 months
Step 1 - IT and Azure foundations
Build the core IT and Azure foundations that AZ-104 assumes. This step establishes the vocabulary and operational context for everything that follows.
- Networking fundamentals: IP addressing, subnets, CIDR, DNS, DHCP, routing, TCP/IP
- Operating system basics: Windows Server and Linux file systems, permissions, processes, remote management
- Virtualization concepts: hypervisors, VMs, virtual networks, virtual disks
- Storage fundamentals: block, file, and object storage, RAID concepts, backup vs replication
- Directory services basics: Active Directory, domain vs workgroup, user and group management
- Azure global infrastructure: regions, availability zones, region pairs
- Azure management interfaces: portal navigation, Azure CLI, PowerShell Az module
- Azure Resource Manager: resource groups, subscriptions, management groups
- Azure pricing models: consumption vs reserved, cost calculator, free account setup
Certifications
💡 AZ-900 is optional. If you are completely new to Azure, take it as a warm-up (2-3 weeks). If you already have cloud or IT experience, skip it and go directly to AZ-104.
💡 PowerShell and Azure CLI both appear in AZ-104 scenario questions. Practice basic commands throughout the entire roadmap.
🏁 Entry Level Checkpoint: You can navigate the Azure portal, run basic CLI commands, and understand core Azure concepts.
🛠 Project Ideas
- ▸Set up a free Azure account. Deploy a simple VM using the portal and connect via RDP/SSH.
- ▸Run basic Azure CLI commands to list resources and create a resource group.
- ▸Compare Azure regions and availability zones for a hypothetical application deployment.
Step 2 - Azure administration core (AZ-104)
Build professional Azure administration skills across identity, networking, compute, storage, and monitoring. AZ-104 covers five domains with specific weightings.
~3-5 months~3-5 months
Step 2 - Azure administration core (AZ-104)
Build professional Azure administration skills across identity, networking, compute, storage, and monitoring. AZ-104 covers five domains with specific weightings.
- Identity and Governance (20-25%): Microsoft Entra ID, RBAC, Azure Policy, PIM, resource locks, cost management
- Networking (15-20%): VNets, NSGs, VNet peering (non-transitivity), UDRs, Azure DNS, Azure Bastion, Load Balancer, Application Gateway, VPN Gateway, ExpressRoute, Private Endpoints
- Compute (20-25%): VMs, VM Scale Sets, ARM templates, Bicep, Azure Container Instances, AKS basics, App Service, Functions
- Storage (15-20%): Storage Accounts, redundancy options (LRS/ZRS/GRS/GZRS), blob tiers, lifecycle management, Azure Files, managed disks, SAS, AzCopy
- Monitoring and Backup (10-15%): Azure Monitor, Log Analytics, KQL basics, Application Insights, Azure Backup, Azure Site Recovery, Service Health
Certifications
💡 Networking is consistently rated the hardest AZ-104 domain. VNet peering non-transitivity is the most exploited concept. If VNet A peers with VNet B and VNet B peers with VNet C, resources in A cannot reach C through B.
💡 Private Endpoints require DNS configuration changes. The connection fails even though the endpoint exists if DNS is not updated.
🏁 Practitioner Level Checkpoint: You have passed AZ-104. You can manage identities, networks, compute, storage, and monitoring in production Azure environments.
🛠 Project Ideas
- ▸Create an Azure Policy that enforces tagging and denies creation of unencrypted storage accounts.
- ▸Deploy a VM using an ARM template. Modify it to use Bicep and deploy it again.
- ▸Configure Azure Backup for a VM and perform a restore. Configure Azure Site Recovery for a test failover.
Step 3 - Exam consolidation and career advancement
Consolidate AZ-104 preparation through integrated scenario practice, timed simulations, and targeted gap closure. Plan your next career move with specialization credentials.
~1 month~1 month
Step 3 - Exam consolidation and career advancement
Consolidate AZ-104 preparation through integrated scenario practice, timed simulations, and targeted gap closure. Plan your next career move with specialization credentials.
- Full scenario practice: end-to-end administration scenarios combining identity, networking, compute, and storage
- Case study technique: reading requirements before background, identifying constraints explicitly
- Domain-weighted gap analysis: allocate remaining time proportionally to exam weights
- Follow-on paths: AZ-305 (Solutions Architect) for architecture roles, AZ-400 (DevOps Engineer) for pipeline roles, SC-500 (Security Engineer) for security roles
Certifications
💡 Consistent performance above 80% on Legend mode across five consecutive ExamOS sessions is the clearest AZ-104 readiness signal.
💡 The most common AZ-104 failure pattern is knowing services individually without reasoning through multi-service scenarios with multiple plausible alternatives.
💡 AZ-305 is the natural follow-on for administrators moving into architecture roles.
💡 AZ-400 is the natural follow-on for administrators moving into DevOps and platform engineering.
💡 SC-500 is the natural follow-on for administrators moving into security-focused roles.
🏁 Specialist Level Checkpoint: You have passed AZ-104. You can design, implement, and operate enterprise-grade Azure environments.
Final Step - What this path actually builds
This roadmap builds a professional Azure administrator who can manage identities, design networking, deploy compute resources, implement storage solutions, and monitor Azure environments. AZ-104 is the most recognized Azure administration credential and is required for several expert-level certifications. Before booking AZ-104, ensure stable performance above 80% on timed ExamOS scenario practice. Pay particular attention to networking and identity—these are the domains where exam day surprises most often occur. AZ-104 is also the prerequisite for AZ-305 (Solutions Architect Expert), AZ-400 (DevOps Engineer Expert), and SC-500 (Cloud and AI Security Engineer). Plan your follow-on path before you sit AZ-104 to focus your preparation on the areas most relevant to your career goals. Build real infrastructure. Measure your readiness with ExamOS. Book when your reasoning is sharp and your configurations are correct.
Final Step - What this path actually builds
This roadmap builds a professional Azure administrator who can manage identities, design networking, deploy compute resources, implement storage solutions, and monitor Azure environments. AZ-104 is the most recognized Azure administration credential and is required for several expert-level certifications. Before booking AZ-104, ensure stable performance above 80% on timed ExamOS scenario practice. Pay particular attention to networking and identity—these are the domains where exam day surprises most often occur. AZ-104 is also the prerequisite for AZ-305 (Solutions Architect Expert), AZ-400 (DevOps Engineer Expert), and SC-500 (Cloud and AI Security Engineer). Plan your follow-on path before you sit AZ-104 to focus your preparation on the areas most relevant to your career goals. Build real infrastructure. Measure your readiness with ExamOS. Book when your reasoning is sharp and your configurations are correct.
Certifications
Final Thoughts
💡 Total: 4-8 months at 2 hours/day (3-5 months at 3-4 hours/day)
💡 AZ-900: 2-3 weeks for complete beginners (optional).
💡 AZ-104: 3-5 months for candidates with general IT experience.
💡 **Networking (15-20%) and Compute (20-25%) together represent up to 45% of the exam—allocate proportionally more time.
💡 Hands-on lab time produces better AZ-104 outcomes than passive reading—build real resources for every major topic.
💡 Readiness: Consistent 80%+ on Legend mode across five sessions is your signal to book.
Honest Timeline
| Path | Minimum Study Pace | More Realistic Pace |
|---|---|---|
| AZ-900 only (optional) | ~2 weeks | ~1 month |
| AZ-104 only | ~3 months | ~5 months |
| AZ-104 + AZ-305 | ~6 months | ~9 months |
| AZ-104 + AZ-400 | ~6 months | ~9 months |